Behavioral task
behavioral1
Sample
f626f8203caa7dbda50d78034cbfb939_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f626f8203caa7dbda50d78034cbfb939_JaffaCakes118
-
Size
129KB
-
MD5
f626f8203caa7dbda50d78034cbfb939
-
SHA1
25368811b1c0b1d6cb4e16c6bcbc2deb4dcb6ada
-
SHA256
9e1ce5cc49f17d5a073ea6e52d18e9dfa8467794c5c52fc07b76855ba3cea85a
-
SHA512
e321925d579c725def28761c0c37ffe49945178b99c40c54544c0bb4875ae3acf1563398f528fdb3df8cccc8537d79914d30d2b7f8a8c56848ae2bf40f9bb0a2
-
SSDEEP
3072:BgrbrPsccAGYxM4gCS11jXyrJje39pS9aqb78252Q:6IhGJq376ag782
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource f626f8203caa7dbda50d78034cbfb939_JaffaCakes118 unpack001/out.upx
Files
-
f626f8203caa7dbda50d78034cbfb939_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ